VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
294717 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-33257 | redhat_vex | dnsdist: insufficient input validation of internal webserver | known not affected: 1 | 2026-06-28T07:30:05+00:00 | Vulnerability · Source |
| CVE-2026-33298 | redhat_vex | llama.cpp: llama.cpp: Remote Code Execution vulnerability due to integer overflow in GGUF file processing | known not affected: 1 | 2026-06-28T07:30:05+00:00 | Vulnerability · Source |
| CVE-2026-33343 | redhat_vex | etcd: etcd: Authorization bypass allows information disclosure via nested transactions | known affected: 4 | 2026-06-28T07:30:05+00:00 | Vulnerability · Source |
| CVE-2026-33259 | redhat_vex | pdns-recursor: concurrent modification of RPZ data can lead to denial of service | known not affected: 1 | 2026-06-28T07:30:05+00:00 | Vulnerability · Source |
| CVE-2026-33230 | redhat_vex | nltk: NLTK: Script execution via reflected cross-site scripting in WordNet Browser | known affected: 39 | 2026-06-28T07:30:03+00:00 | Vulnerability · Source |
| CVE-2019-8070 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerabilities (APSB19-46) | fixed: 3 | 2026-06-28T07:30:02+00:00 | Vulnerability · Source |
| CVE-2023-2177 | redhat_vex | Kernel: NULL pointer dereference problem in sctp_sched_dequeue_common | fixed: 514 known not affected: 42 | 2026-06-28T07:30:01+00:00 | Vulnerability · Source |
| CVE-2026-33202 | redhat_vex | rails: Active Storage: Unintended file deletion via crafted blob keys | known affected: 15 known not affected: 2 | 2026-06-28T07:30:01+00:00 | Vulnerability · Source |
| CVE-2019-8325 | redhat_vex | rubygems: Escape sequence injection vulnerability in errors | fixed: 778 known affected: 22 known not affected: 22 | 2026-06-28T07:29:59+00:00 | Vulnerability · Source |
| CVE-2019-8324 | redhat_vex | rubygems: Installing a malicious gem may lead to arbitrary code execution | fixed: 925 known not affected: 24 | 2026-06-28T07:29:59+00:00 | Vulnerability · Source |
| CVE-2019-8322 | redhat_vex | rubygems: Escape sequence injection vulnerability in gem owner | fixed: 778 known affected: 22 known not affected: 22 | 2026-06-28T07:29:59+00:00 | Vulnerability · Source |
| CVE-2019-8323 | redhat_vex | rubygems: Escape sequence injection vulnerability in API response handling | fixed: 778 known affected: 22 known not affected: 22 | 2026-06-28T07:29:59+00:00 | Vulnerability · Source |
| CVE-2019-8075 | redhat_vex | flash-plugin: Same origin policy bypass leading to information disclosure | fixed: 3 known not affected: 2 | 2026-06-28T07:29:58+00:00 | Vulnerability · Source |
| CVE-2019-8320 | redhat_vex | rubygems: Delete directory using symlink when decompressing tar | fixed: 554 known affected: 20 known not affected: 40 | 2026-06-28T07:29:58+00:00 | Vulnerability · Source |
| CVE-2019-7837 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB19-26) | fixed: 3 | 2026-06-28T07:29:57+00:00 | Vulnerability · Source |
| CVE-2026-33205 | redhat_vex | calibre: server-side request forgery in ebook viewer backend | known not affected: 1 | 2026-06-28T07:29:57+00:00 | Vulnerability · Source |
| CVE-2019-8069 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerabilities (APSB19-46) | fixed: 3 | 2026-06-28T07:29:57+00:00 | Vulnerability · Source |
| CVE-2019-7096 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB19-19) | fixed: 3 | 2026-06-28T07:29:57+00:00 | Vulnerability · Source |
| CVE-2019-7845 | redhat_vex | flash-plugin: Arbitrary Code Execution vulnerability (APSB19-30) | fixed: 3 | 2026-06-28T07:29:57+00:00 | Vulnerability · Source |
| CVE-2026-33174 | redhat_vex | Rails: Active Storage: Rails Active Storage: Denial of Service via unbounded Range header | known affected: 15 known not affected: 4 | 2026-06-28T07:29:55+00:00 | Vulnerability · Source |
| CVE-2026-33176 | redhat_vex | Rails: Active Support: Active Support: Denial of Service via large scientific notation strings | fixed: 16 known affected: 1 known not affected: 281 | 2026-06-28T07:29:55+00:00 | Vulnerability · Source |
| CVE-2019-7222 | redhat_vex | Kernel: KVM: leak of uninitialized stack contents to guest | fixed: 358 known not affected: 43 | 2026-06-28T07:29:55+00:00 | Vulnerability · Source |
| CVE-2026-33173 | redhat_vex | Rails: Active Storage: Rails Active Storage: Content type bypass via arbitrary metadata in direct uploads | known affected: 17 | 2026-06-28T07:29:54+00:00 | Vulnerability · Source |
| CVE-2026-33169 | redhat_vex | rails: rails-activesupport: Active Support: Denial of Service via crafted long digit strings | known affected: 2 | 2026-06-28T07:29:53+00:00 | Vulnerability · Source |
| CVE-2019-6977 | redhat_vex | gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c | fixed: 998 known affected: 92 known not affected: 51 | 2026-06-28T07:29:52+00:00 | Vulnerability · Source |
| CVE-2019-7108 | redhat_vex | flash-plugin: Information Disclosure vulnerability (APSB19-19) | fixed: 3 | 2026-06-28T07:29:52+00:00 | Vulnerability · Source |
| CVE-2026-33168 | redhat_vex | actionview: Action View: Cross-Site Scripting (XSS) via blank HTML attribute names | known affected: 17 | 2026-06-28T07:29:52+00:00 | Vulnerability · Source |
| CVE-2026-33147 | redhat_vex | gmt: GMT: Stack-based Buffer Overflow in gmt_remote_dataset_id | known not affected: 1 | 2026-06-28T07:29:51+00:00 | Vulnerability · Source |
| CVE-2019-5872 | redhat_vex | chromium-browser: Use-after-free in Mojo | fixed: 14 | 2026-06-28T07:29:51+00:00 | Vulnerability · Source |
| CVE-2026-33145 | redhat_vex | xrdp: xrdp-sesman: xrdp: Arbitrary Command Execution via unsafe handling of AlternateShell parameter | known not affected: 1 | 2026-06-28T07:29:51+00:00 | Vulnerability · Source |
| CVE-2026-33151 | redhat_vex | socket.io: Socket.IO: Denial of Service due to excessive buffering of specially crafted packets | known affected: 10 | 2026-06-28T07:29:51+00:00 | Vulnerability · Source |
| CVE-2026-33019 | redhat_vex | libsixel: libsixel: Denial of Service and Information Disclosure via integer overflow in crop option | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33123 | redhat_vex | pypdf: pypdf: Denial of Service due to excessive resource consumption from crafted PDF | known affected: 9 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33018 | redhat_vex | libsixel: libsixel: Arbitrary code execution via Use-After-Free in GIF processing | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33020 | redhat_vex | libsixel: libsixel: Arbitrary code execution via crafted palettised PNG image processing | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33021 | redhat_vex | libsixel: libsixel: Use-after-free vulnerability allows for potential code execution via premature pixel buffer freeing. | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33128 | redhat_vex | h3: H3: Server-Sent Events injection due to improper newline sanitization | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33069 | redhat_vex | PJSIP: PJSIP: Information disclosure vulnerability in SIP message processing | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33034 | redhat_vex | Django: Django: Denial of Service via missing or understated Content-Length header in ASGI requests | known affected: 11 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33023 | redhat_vex | libsixel: libsixel: Code execution via crafted image due to use-after-free vulnerability | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2026-33129 | redhat_vex | h3: H3: Password deduction via Timing Side-Channel vulnerability in basic authentication | known not affected: 1 | 2026-06-28T07:29:50+00:00 | Vulnerability · Source |
| CVE-2019-5876 | redhat_vex | chromium-browser: Use-after-free in media | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5880 | redhat_vex | chromium-browser: SameSite cookie bypass | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5877 | redhat_vex | chromium-browser: Out-of-bounds access in V8 | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5879 | redhat_vex | chromium-browser: Extensions can read some local files | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2020-10933 | redhat_vex | ruby: BasicSocket#read_nonblock method leads to information disclosure | fixed: 767 known not affected: 47 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5878 | redhat_vex | chromium-browser: Use-after-free in V8 | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5881 | redhat_vex | chromium-browser: Arbitrary read in SwiftShader | fixed: 14 | 2026-06-28T07:29:49+00:00 | Vulnerability · Source |
| CVE-2019-5870 | redhat_vex | chromium-browser: Use-after-free in media | fixed: 14 | 2026-06-28T07:29:48+00:00 | Vulnerability · Source |
| CVE-2019-5871 | redhat_vex | chromium-browser: Heap overflow in Skia | fixed: 14 | 2026-06-28T07:29:48+00:00 | Vulnerability · Source |